Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0YqFDB7j4iQf7-dJblz8YDjIa9s.roa
File: 0YqFDB7j4iQf7-dJblz8YDjIa9s.roa (raw, json)
Hash identifier: xlQDgHLxXaPQo52lFjffn/Dbrlu50nmuhz3xyygnOAU=
Subject key identifier: D1:8A:85:0C:1E:E3:E2:24:1F:EF:E7:49:6E:5C:FC:60:38:C8:6B:DB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01857039AC9DE446AF4B7E19C9AA90014FBF
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0YqFDB7j4iQf7-dJblz8YDjIa9s.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 213.21.238.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:ac:9d:e4:46:af:4b:7e:19:c9:aa:90:01:4f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d18a850c1ee3e2241fefe7496e5cfc6038c86bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:44:4a:47:65:36:e2:0b:47:51:39:5e:96:
62:70:52:bb:26:d4:99:b3:3d:0f:f3:03:c5:02:27:
de:8c:09:bb:d0:18:4e:e6:87:be:27:bc:37:5e:4f:
41:33:e0:8d:93:bf:46:86:df:02:cc:2c:98:aa:78:
80:17:c2:bb:1a:46:6a:94:ad:cc:9a:89:19:14:78:
d7:78:b3:9b:db:4a:83:39:b7:30:52:ca:e5:91:59:
8d:72:af:9c:bd:6d:c6:c3:3d:f0:ce:89:69:0c:46:
ea:af:ec:ff:3f:e9:b6:0c:79:59:df:2e:60:74:ce:
f9:fc:79:54:a4:81:11:bc:d5:ca:87:1f:b6:44:63:
e4:75:8f:b0:b2:db:c0:b8:a6:77:48:09:bd:e0:51:
99:67:7f:3c:e3:1a:66:4f:3c:aa:45:1f:6c:9b:be:
66:f4:70:8f:c8:37:d7:2a:33:cc:c5:13:b3:a1:2c:
e7:65:cf:b1:54:53:4c:46:37:b8:f9:7b:fe:29:b5:
5f:be:33:1b:63:56:98:01:34:2f:28:a6:ab:a4:36:
06:b9:9a:a7:77:cd:e3:25:96:75:94:8c:9f:fb:1c:
fe:b3:20:24:8d:82:9a:ed:aa:dc:41:70:09:61:78:
94:7b:7f:82:d9:c9:db:1e:5f:1a:20:65:97:09:9d:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:85:0C:1E:E3:E2:24:1F:EF:E7:49:6E:5C:FC:60:38:C8:6B:DB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0YqFDB7j4iQf7-dJblz8YDjIa9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.238.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6d:c9:3d:64:00:4e:31:37:c9:d5:4f:16:a2:9e:1c:db:e5:
20:db:57:5d:e4:f0:a6:18:83:bd:89:35:d5:3e:e2:21:60:88:
6c:f4:80:4a:e7:e3:2d:de:5e:3b:1d:82:aa:28:7b:92:25:79:
a1:30:c9:50:9f:8f:5a:78:3e:78:f9:e4:84:0e:8f:3d:06:aa:
6f:5e:34:91:ce:57:7f:fc:44:9f:18:3a:85:0f:3d:55:a3:8a:
da:28:5a:07:ad:34:8c:f6:87:12:0f:80:2b:2b:03:a9:81:16:
b8:cc:b4:78:b0:ac:ad:c2:97:75:57:36:f7:3e:8c:63:88:d4:
00:18:08:d7:10:45:21:e4:fa:e1:32:7d:4c:7f:85:0a:6f:9f:
c2:38:36:88:af:57:98:ba:0e:76:6b:10:ba:aa:9c:a7:45:38:
18:76:0c:86:2d:67:83:68:40:4d:8e:be:ef:84:5d:bf:58:f3:
b0:b3:b6:44:45:38:ea:bd:ea:bc:ce:82:16:66:c2:c5:29:df:
66:2b:70:13:83:01:77:82:96:ac:de:41:24:a2:48:48:01:c3:
fc:76:3e:1d:d8:79:d1:c0:3a:66:7e:a5:cc:2f:32:ca:c2:70:
03:64:ae:85:f9:ae:82:aa:9d:a7:ac:48:f6:7f:b6:5c:4c:43:
3e:f7:2d:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwOayd5EavS34ZyaqQAU+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjMwMTAyMDIwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMThhODUwYzFlZTNlMjI0MWZlZmU3NDk2ZTVjZmM2MDM4Yzg2YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5JESkdlNuILR1E5XpZicFK7JtSZ
sz0P8wPFAifejAm70BhO5oe+J7w3Xk9BM+CNk79Ght8CzCyYqniAF8K7GkZqlK3M
mokZFHjXeLOb20qDObcwUsrlkVmNcq+cvW3Gwz3wzolpDEbqr+z/P+m2DHlZ3y5g
dM75/HlUpIERvNXKhx+2RGPkdY+wstvAuKZ3SAm94FGZZ3884xpmTzyqRR9sm75m
9HCPyDfXKjPMxROzoSznZc+xVFNMRje4+Xv+KbVfvjMbY1aYATQvKKarpDYGuZqn
d83jJZZ1lIyf+xz+syAkjYKa7arcQXAJYXiUe3+C2cnbHl8aIGWXCZ1wfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNGKhQwe4+IkH+/nSW5c/GA4yGvbMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvMFlxRkRCN2o0aVFmNy1kSmJsejhZRGpJYTlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXuAwQA
1RX4MA0GCSqGSIb3DQEBCwUAA4IBAQAnbck9ZABOMTfJ1U8Wop4c2+Ug21dd5PCm
GIO9iTXVPuIhYIhs9IBK5+Mt3l47HYKqKHuSJXmhMMlQn49aeD54+eSEDo89Bqpv
XjSRzld//ESfGDqFDz1Vo4raKFoHrTSM9ocSD4ArKwOpgRa4zLR4sKytwpd1Vzb3
PoxjiNQAGAjXEEUh5PrhMn1Mf4UKb5/CODaIr1eYug52axC6qpynRTgYdgyGLWeD
aEBNjr7vhF2/WPOws7ZERTjqveq8zoIWZsLFKd9mK3ATgwF3gpas3kEkokhIAcP8
dj4d2HnRwDpmfqXMLzLKwnADZK6F+a6Cqp2nrEj2f7ZcTEM+9y02
-----END CERTIFICATE-----
Generated at Thu Sep 21 12:59:47 2023 by rpki-client on console-ams.rpki-client.org